Cyber security in an automotive network

• US 8,925,083 B2
• Filed: 10/04/2012
• Issued: 12/30/2014
• Est. Priority Date: 10/25/2011
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Niner, Rod, Costin, Mark H.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US13/644,554
• Publication Number:
  US 20130104231A1
• Time in Patent Office: 817 Days
• Field of Search: 726/23
• US Class Current: 726/23
• CPC Class Codes: B60R 25/00 Fittings or systems for preventing or indicating unauthorised use or theft of vehicles locks for vehicles E05B77/00-E05B85/00
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

Preventing spoofing in an automotive network includes monitoring, by electronic control unit, data packets on a bus in the automotive network. Upon determining, in response to the monitoring, that a data packet is from a source other than the electronic control unit, the preventing spoofing in the automotive network includes generating and transmitting a diagnostic message to at least one module in the automotive network over the bus, the diagnostic message instructing the at least one module to take no action on the data packet.

Claims

1. A method for preventing spoofing in an automotive network, the method comprising:

tracking, by an electronic control unit of a vehicle, at least one message created by the electronic control unit and transmitted on a bus in the automotive network, the at least one message forming one of a plurality of messages transmitted among a plurality of electronic control units on the bus, the electronic control unit assigned a unique identifier;

monitoring, by the electronic control unit, data packets of the plurality of messages, each of the data packets including an identifier of a corresponding electronic control unit based on a routing plan; and

upon determining by the electronic control unit, in response to the monitoring, that an identifier contained in at least one of the data packets matches the unique identifier assigned to the electronic control unit and that the electronic control unit, responsive to the tracking, is not the creator of the at least one of the data packets, generating and transmitting a diagnostic message to at least one module in the automotive network over the bus, the diagnostic message instructing the at least one module to take no action on the at least one of the data packets.

2. The method of claim 1, wherein the data packets are transmitted in response to a sensor reading and contain sensor reading data.

3. The method of claim 1, wherein the monitoring is performed by an application executable by a processor of the electronic control unit.

4. The method of claim 1, wherein the at least one of the data packets that is not created by the electronic control unit is received from a source that is external to the automotive network.

5. The method of claim 1, wherein the automotive network is a wireless network.

6. The method of claim 1, wherein the plurality of messages are transmitted over the automotive network via transceivers of corresponding electronic control units.

7. The method of claim 1, wherein a message containing the at least one of the data packets that is not created by the electronic control unit is a spoofed message.

8. A system for preventing spoofing in an automotive network, comprising:

an electronic control unit including a computer processor; and

an application executable by the computer processor, the application configured to implement;

tracking at least one message created by the electronic control unit and transmitted on a bus in the automotive network, the at least one message forming one of a plurality of messages transmitted among a plurality of electronic control units on the bus, the electronic control unit assigned a unique identifier;

monitoring data packets of the plurality of messages, each of the data packets including an identifier of a corresponding electronic control unit based on a routing plan; and

upon determining, in response to the monitoring, that an identifier contained in the at least one of the data packets matches the unique identifier assigned to the electronic control unit and that the electronic control unit, responsive to the tracking, is not the creator of the at least one of the data packets, generating and transmitting a diagnostic message to at least one module in the automotive network over the bus, the diagnostic message instructing the at least one module to take no action on the at least one of the data packets.

9. The system of claim 8, wherein the data packets are transmitted in response to a sensor reading and contain sensor reading data.

10. The system of claim 8, wherein the at least one of the data packets that is not created by the electronic control unit is received from a source that is external to the automotive network.

11. The system of claim 8, wherein the automotive network is a wireless network.

12. The system of claim 8, wherein the plurality of messages are transmitted over the automotive network via transceivers of corresponding electronic control units.

13. A computer program product for preventing spoofing in an automotive network, the computer program product comprising a non-transitory computer storage medium having instructions embodied thereon, which when executed by a processor of an electronic control unit cause the electronic control unit to implement:

tracking at least one message created by the electronic control unit and transmitted on a bus in the automotive network, the at least one message forming one of a plurality of messages transmitted among a plurality of electronic control units on the bus, the electronic control unit assigned a unique identifier;

monitoring data packets of the plurality of messages, each of the data packets including an identifier of a corresponding electronic control unit based on a routing plan; and

upon determining, in response to the monitoring, that an identifier contained in the at least one of the data packets matches the unique identifier assigned to the electronic control unit and that the electronic control unit, responsive to the tracking, is not the creator of the at least one of the data packets, generating and transmitting a diagnostic message to at least one module in the automotive network over the bus, the diagnostic message instructing the at least one module to take no action on the at least one of the data packets.

14. The computer program product of claim 13, wherein the data packets are transmitted in response to a sensor reading and contain sensor reading data.

15. The computer program product of claim 13, wherein the at least one of the data packets that is not created by the electronic control unit is received from a source that is external to the automotive network.

16. The computer program product of claim 13, wherein the automotive network is a controller-area network.

17. The computer program product of claim 13, wherein the plurality of messages are transmitted over the automotive network via a transceivers of corresponding electronic control units.

18. A method for preventing spoofing in an automotive network, the method comprising:

tracking, by an electronic control unit of a vehicle, at least one message created by the electronic control unit and transmitted on a bus in the automotive network, the at least one message forming one of a plurality of messages transmitted among a plurality of electronic control units on the bus, the electronic control unit assigned a unique identifier;

monitoring, by the electronic control unit, data packets of the plurality of messages, each of the data packets including an identifier of a corresponding electronic control unit based on a routing plan; and

upon determining by the electronic control unit, in response to the monitoring, that an identifier contained in at least one of the data packets matches the unique identifier assigned to the electronic control unit and that the electronic control unit, responsive to the tracking, is not the creator of the at least one of the data packets, performing a dominant override of data fields in the at least one of the data packets using a dominant state and a recessive state of a state machine implemented by the electronic control unit.